JaffaCakes118_f28a4c0e388d87f531d21c767201cd60 | Triage

Sharing

General

Target

JaffaCakes118_f28a4c0e388d87f531d21c767201cd60
Size

1.4MB
MD5

f28a4c0e388d87f531d21c767201cd60
SHA1

5ad452f3c69471746c8d5eaa268bc01fc2230667
SHA256

9629e58ffe98cceff080f6d4c807d6852391c5a75a15a3493f69aa64681bf316
SHA512

88b17657bd94aafa492ab2e51adc0787af66b9270f7b7b4f3b48756f4f0fbb405db0bad166c347589ca907016eb3984efa17e0ee23e6badba575b21397b5fa5f
SSDEEP

24576:rOUcu74of4aI6hnq5Ahkp4j1NInpzxnQgBXhkXpdAipG+YEOXyT+zTmyoDl2ab8v:ao74ChqqKCYVlQeXEdhzYEOCSzThoDlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f28a4c0e388d87f531d21c767201cd60

Files

JaffaCakes118_f28a4c0e388d87f531d21c767201cd60
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.2MB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ